This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json) Hash identifier: bhiXOwJa42/xxqVR4qgn26zFKXAFCepP4RUFHqrmJxg= Subject key identifier: 01:35:99:DD:E3:74:41:29:89:D2:15:91:ED:6F:64:FD:29:B1:9C:4D Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4 Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4 Certificate serial: 019AF27697E7C6552233FACC7DB69513D4ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft Manifest number: 05E5 Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: 0KFDxC57smbCqeYa54SzvKgwsLud6ul1hSdzKL46BPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:97:e7:c6:55:22:33:fa:cc:7d:b6:95:13:d4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4 Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=013599dde374412989d21591ed6f64fd29b19c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:8a:a0:29:5c:7b:05:f7:74:bd:57:ac:80: b5:df:a7:6e:36:44:ef:ad:2f:ba:4a:5a:ab:a6:1a: f1:b9:8f:9a:b4:c3:d2:71:2f:50:32:98:93:3e:3e: 09:7c:dc:c7:73:13:26:45:02:67:69:90:4a:9a:a0: 42:d0:96:a4:b1:9f:d1:98:7e:af:c5:be:9b:41:db: 26:ff:72:9b:c7:30:17:96:b7:ae:a4:93:11:3e:29: 53:71:1c:33:56:d7:6f:9f:aa:17:47:6b:a9:d7:33: 6f:c2:d0:37:fd:7d:10:30:39:49:47:f4:e1:db:97: 01:5b:ea:23:b4:d6:0e:89:2f:cd:de:1b:f1:fd:eb: 49:9a:d2:65:ea:50:88:24:62:a2:1b:b6:3b:52:be: da:b2:58:01:ec:b1:98:2c:26:93:cc:c2:a6:8c:0d: ad:06:7e:98:26:89:a1:d9:c5:7f:9e:6c:47:70:6f: f0:71:df:81:ba:b4:3d:55:02:f2:38:4e:4a:de:aa: 6e:0c:4b:a1:69:a4:f6:98:de:ce:c7:04:7d:26:ce: 5b:9c:94:a7:f5:62:4d:c1:55:c1:cc:59:36:6c:ef: 7b:e0:51:4d:38:bc:cb:c8:78:16:8e:fe:d4:59:3c: 1c:f6:4d:8f:06:7f:8f:8c:0e:68:c0:b7:ad:26:ec: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:35:99:DD:E3:74:41:29:89:D2:15:91:ED:6F:64:FD:29:B1:9C:4D X509v3 Authority Key Identifier: keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f7:85:3b:69:77:55:34:6c:90:a2:73:fa:27:86:5c:38:c2: a2:bf:49:88:93:88:7a:6f:eb:3b:df:20:f6:95:f9:ab:d0:07: b0:44:e2:4e:71:68:eb:a9:74:07:4b:4b:37:64:56:c8:06:0d: 81:9f:bd:54:44:07:f6:66:73:16:1b:76:ed:e4:15:a6:07:3f: 71:76:c6:e7:af:c1:e1:1f:92:84:d0:3d:2b:8a:26:a8:13:b1: 2b:01:cb:e1:c4:f2:1a:e9:82:6a:9c:73:9d:44:94:ad:0f:fc: af:46:98:db:fc:d1:a3:8c:7f:ac:55:c1:c5:2b:7b:1f:21:52: 76:95:95:e0:c0:b0:9d:3b:85:7d:cc:bb:a3:07:f3:6f:73:5c: c4:98:90:65:e8:10:02:cc:69:78:5c:30:4f:51:86:6a:83:f5: 32:74:07:34:ad:05:f7:81:35:3c:37:86:4d:64:ee:bb:7a:d8: bd:8a:03:cd:08:3c:ce:ca:e1:86:ef:e0:6c:cb:47:0b:73:64: 25:39:9b:e0:1b:25:53:33:1e:a1:a9:a2:73:c8:eb:f7:c5:a0: 46:b3:08:2c:51:d2:95:3d:17:13:5f:d0:e3:fa:a2:98:91:cb: 59:e9:a1:ef:8c:df:c5:b0:89:84:d7:d9:8d:77:9f:a5:a1:d6: 9d:1d:96:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpfnxlUiM/rMfbaVE9TtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj ODNjZjQwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD EygwMTM1OTlkZGUzNzQ0MTI5ODlkMjE1OTFlZDZmNjRmZDI5YjE5YzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzziKoClcewX3dL1XrIC136duNkTv rS+6SlqrphrxuY+atMPScS9QMpiTPj4JfNzHcxMmRQJnaZBKmqBC0JaksZ/RmH6v xb6bQdsm/3KbxzAXlreupJMRPilTcRwzVtdvn6oXR2up1zNvwtA3/X0QMDlJR/Th 25cBW+ojtNYOiS/N3hvx/etJmtJl6lCIJGKiG7Y7Ur7aslgB7LGYLCaTzMKmjA2t Bn6YJomh2cV/nmxHcG/wcd+BurQ9VQLyOE5K3qpuDEuhaaT2mN7OxwR9Js5bnJSn 9WJNwVXBzFk2bO974FFNOLzLyHgWjv7UWTwc9k2PBn+PjA5owLetJuyv4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE1md3jdEEpidIVke1vZP0psZxNMB8GA1UdIwQY MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt OWRkNTIzMTNhZTdjLzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqveFO2l3 VTRskKJz+ieGXDjCor9JiJOIem/rO98g9pX5q9AHsETiTnFo66l0B0tLN2RWyAYN gZ+9VEQH9mZzFht27eQVpgc/cXbG56/B4R+ShNA9K4omqBOxKwHL4cTyGumCapxz nUSUrQ/8r0aY2/zRo4x/rFXBxSt7HyFSdpWV4MCwnTuFfcy7owfzb3NcxJiQZegQ AsxpeFwwT1GGaoP1MnQHNK0F94E1PDeGTWTuu3rYvYoDzQg8zsrhhu/gbMtHC3Nk JTmb4BslUzMeoamic8jr98WgRrMILFHSlT0XE1/Q4/qimJHLWemh74zfxbCJhNfZ jXefpaHWnR2Waw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:24 2025 by rpki-client